1e5511ec010d4c3f93caf5989edf7335a5a635141446970999b66653e612a427 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e5511ec010d4c3f93caf5989edf7335a5a635141446970999b66653e612a427
Size

40KB
MD5

27014722861a64addedfee2ac9b23d1d
SHA1

ca1554bc829790c82eac5facff3e9b67647fb090
SHA256

1e5511ec010d4c3f93caf5989edf7335a5a635141446970999b66653e612a427
SHA512

ccc4187b7e8cbfd6cc589a6375b84173cad9de2f67958f06ce26b6836e0bd652a14bd50b9fc2d930081bb8bad946f8e2fa83458deee4b166f583fb58f2496904
SSDEEP

384:UMp3HU08d22ANi0o+4tdmuJc1PbJLoMiOFlMulIcSreorF/bdgMpJPJU:UEHUDGTMkJkQBlTSppB8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e5511ec010d4c3f93caf5989edf7335a5a635141446970999b66653e612a427

Files

1e5511ec010d4c3f93caf5989edf7335a5a635141446970999b66653e612a427
.exe windows:5 windows x86 arch:x86

30c213a1468a81a73c565e04024cebe9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

kernel32

GetModuleHandleW
GetModuleHandleA
ExitProcess

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ